Re: Chrome browser insecurity
David Bruant <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <[email protected]> |
Le 23/08/2013 12:15, David Nicol a écrit : > So what would a POLA-compliant web browser do differently? Is Konqueror close? What does "POLA-compliant web browser" mean? A real world web browser has to send both cookies and referer header. Not so POLA-compliant and that's just one example. The Same-Origin Policy is also too coarse-grained and asks browsers to provide too much authority (access to local storage for starters) to any page delivered from a given domain. Is your question about browser and extensions? David